Full disk encryption with Ubuntu

[Jared Norris]

Hi all,

Long story short, I had a hard drive fail under warranty that I couldn't
claim on. They wanted me to return the disk via post with no promises of
secure destruction and as the failure mode meant the data was read only and
couldn't be formatted/encrypted so I didn't take them up on the offer.

I'm trying to do better this time and have purchased a new HDD (Crucial P5
Plus - M2) and it has encryption capabilities built in. I generally run a
full Ubuntu disk and only run other OS's inside virtual machines so no need
to worry about multiple OS's.

I'm trying to decide on the best approach, from what I can see the main
options include
1 - hardware based SED -
https://www.crucial.com/support/articles-faq-ssd/overview-hardware-encryption
2 - Ubuntu installer based LVM/LUKS - encryption option offered during
installation
3 - Ubuntu software based full disk encryption -
https://help.ubuntu.com/community/Full_Disk_Encryption_Howto_2019

I'm leaning towards 1 to remove any possible performance impact and also
because I have no experience of either options 2 or 3. Option 2 looks
relatively straightforward and option 3 looks incredibly painful. My main
concerns with option 1 is that I'm worried what happens whenever I get a
new PC and want to move the HDD.

Does anyone have any experience with the options (or can suggest another)
have a preferred approach?

Regards,

Jared Norris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20230128/c0337a6c/attachment.html>